Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa
File:                     610B51267AE711EFACC0CA34C4F9AE02.roa (raw, json)
Hash identifier:          zU4zzGCVl4bElUORl3NySVv02p4BnUlOIqIlBWtOii0=
Subject key identifier:   60:AD:4E:9B:09:35:5B:B9:42:62:C7:FF:0A:03:68:19:00:75:B8:05
Certificate issuer:       /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial:       0271
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:52:15 +0000
ROA not before:           Sun 11 May 2025 02:31:43 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     151331
IP address blocks:        2400:e3e0:aa00::/40 maxlen: 48
                          2400:e3e0:ab00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
                          rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
        Validity
            Not Before: May 11 02:31:43 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47ccf-6dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:8a:1a:13:d0:2d:00:a5:2f:89:db:c5:16:
                    f0:f2:5e:c7:18:c0:1b:3a:7c:83:1a:31:c9:6e:c2:
                    6c:3c:9a:8f:88:57:51:73:58:46:95:f6:a3:78:01:
                    36:71:69:d0:b9:0c:e5:2b:f3:7d:08:a7:1c:e8:f7:
                    67:09:a9:93:e3:1a:27:0b:57:df:c2:84:75:1f:e1:
                    e8:9c:6b:9f:d2:80:e4:9c:b4:97:38:c6:bb:5b:ef:
                    9c:45:86:1f:27:02:a4:16:ff:5e:c1:22:cd:c3:12:
                    22:42:1a:91:0b:2b:6f:ea:1c:75:43:7b:b4:ef:3b:
                    22:2a:5f:d7:70:69:f5:df:cd:4b:a0:4d:de:af:b8:
                    39:c9:2c:37:ae:b7:47:1a:ec:78:90:92:ad:1c:cf:
                    65:0e:ab:8c:fd:2c:43:b0:64:2e:2b:8b:b5:e2:00:
                    46:55:b3:cf:3e:67:79:65:2f:15:b4:ed:17:b5:6d:
                    51:ef:c5:81:be:1e:8d:e8:67:f3:83:d2:42:fe:c6:
                    f7:cd:5d:a0:82:e9:36:ca:bd:c3:dc:fc:8f:f0:99:
                    52:af:0e:b5:37:b8:f1:a0:f4:ac:f6:e5:8a:e8:02:
                    ba:26:ce:f9:4e:dd:70:5e:02:4f:78:39:32:72:fe:
                    20:5e:d5:9c:75:b5:80:7c:30:cf:b3:a2:d9:d0:09:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AD:4E:9B:09:35:5B:B9:42:62:C7:FF:0A:03:68:19:00:75:B8:05
            X509v3 Authority Key Identifier:
                keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e3e0:aa00::/39

    Signature Algorithm: sha256WithRSAEncryption
         08:e2:be:ba:c6:49:90:3d:69:44:c6:7e:e9:c9:91:1d:7e:27:
         26:1d:b9:80:12:2d:54:17:c2:69:1e:85:70:7f:79:49:0d:a3:
         d6:e3:89:c9:59:4e:f8:a1:6c:cc:4f:76:67:39:51:f7:44:10:
         07:10:61:25:59:ce:24:5c:20:05:7b:1f:c2:a4:cb:29:ca:56:
         cd:29:4f:41:b3:67:fb:3d:82:a0:01:7e:c4:3d:8b:e9:4d:d4:
         5e:2c:99:05:92:62:47:28:f6:de:2a:13:86:54:61:14:98:a9:
         c6:e0:19:0d:81:05:73:2c:e9:e5:b4:6c:c9:d9:79:75:40:f1:
         1d:85:63:be:00:09:b8:f9:de:e6:6d:04:4a:20:45:3c:fc:79:
         49:66:b3:d9:09:5e:d6:08:9c:0f:d2:de:66:a3:18:9e:ec:0b:
         4a:3f:6e:c1:e1:67:78:34:24:cf:0c:f4:9f:4a:b7:53:29:15:
         e9:d2:23:65:4a:85:fe:d8:33:6e:c4:45:88:74:3c:d5:5e:d3:
         e7:52:fe:8f:f7:84:c7:11:37:cd:b2:dc:a3:63:7c:13:7e:c0:
         54:a8:ad:00:16:13:86:a8:04:50:5e:c8:f2:26:f5:69:2d:ba:
         7b:25:d3:57:ff:a4:f7:88:03:a4:99:07:3a:97:b1:3e:c2:df:
         80:c2:03:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:08 2026 by rpki-client